Xbase++ Requires Chilkat v11.0.0+

Microsoft Teams OAuth2 Client Credentials Authentication

See more Microsoft Teams Examples

Demonstrates how to authenticate with OAuth 2.0 using the client credentials grant type. Xbase++

LOCAL nSuccess
LOCAL oHttp
LOCAL oJsonOAuthCC
LOCAL oJson
LOCAL oResp

nSuccess := 0

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

oHttp := CreateObject("Chilkat.Http")

//  Provide the information needed for Chilkat to automatically fetch the OAuth2.0 
//  access token as needed.
//  This is the new "Integrated OAuth2 Client Credentials" feature introduced in Chilkat v9.5.0.96.  
oJsonOAuthCC := CreateObject("Chilkat.JsonObject")

//  --------------------------------------------------------------------------------------------------------
//  You'll need to have registered an app in Azure beforehand.
//  
//  Note: Creating a Team requires the following Application permissions:
//  Team.Create, Teamwork.Migrate.All, Group.ReadWrite.All**, Directory.ReadWrite.All**
//  
//  See How to Create an Azure App Registration for OAuth 2.0 Client Credentials
//  --------------------------------------------------------------------------------------------------------

//  Use the values from your App Registration in Azure.
oJsonOAuthCC:UpdateString("client_id", "e1cd2318-xxxx-4916-bfd6-xxxxxxxxxxxx")
oJsonOAuthCC:UpdateString("client_secret", "K.d8Q~RoJxxxxvCj_u_xxxxxxxxxxxxxxxxxxxxx")

//  You'll always use this scope for client credentials, because the allowed actions
//  are determined by the App Permissions defined when you registered the app in Azure.
oJsonOAuthCC:UpdateString("scope", "https://graph.microsoft.com/.default")

//  The token endpoint includes your tenant ID.  Use your tenant ID (not the tenant ID shown here).
oJsonOAuthCC:UpdateString("token_endpoint", "https://login.microsoftonline.com/112d7ed6-71bf-4eba-a866-738364321bfc/oauth2/v2.0/token")

//  Provide the OAuth2 information. Chilkat will use this information to automatically fetch the OAuth2 access token as needed,
oHttp:AuthToken := oJsonOAuthCC:Emit()

//  ------------------------------------------------------------------------------
//  To create a Microsoft Team, we want to send an HTTP request like the following:
//  
//  Note: The following is the minimal JSON for a request using Applicaton permissions (i.e. the access token retrieved using the client credentials grant).
//  
//  POST https://graph.microsoft.com/v1.0/teams
//  Content-Type: application/json
//  
//  {
//     "template@odata.bind":"https://graph.microsoft.com/v1.0/teamsTemplates('standard')",
//     "displayName":"My Sample Team",
//     "description":"My Sample Team�s Description",
//     "members":[
//        {
//           "@odata.type":"#microsoft.graph.aadUserConversationMember",
//           "roles":[
//              "owner"
//           ],
//           "user@odata.bind":"https://graph.microsoft.com/v1.0/users('0040b377-61d8-43db-94f5-81374122dc7e')"
//        }
//     ]
//  }

oJson := CreateObject("Chilkat.JsonObject")
oJson:UpdateString('"template@odata.bind"', "https://graph.microsoft.com/v1.0/teamsTemplates('standard')")
oJson:UpdateString("displayName", "My Sample Team")
oJson:UpdateString("description", "My Sample Team�s Description")
oJson:UpdateString('members[0]."@odata.type"', "#microsoft.graph.aadUserConversationMember")
oJson:UpdateString("members[0].roles[0]", "owner")
oJson:UpdateString('members[0]."user@odata.bind"', "https://graph.microsoft.com/v1.0/users('4ee732c3-322e-4a6b-b729-2fd1eb5c6004')")

oJson:EmitCompact := 0
? oJson:Emit()

oHttp:SetRequestHeader("Content-type", "application/json")

oResp := CreateObject("Chilkat.HttpResponse")
nSuccess := oHttp:HttpJson("POST", "https://graph.microsoft.com/v1.0/teams", oJson, "application/json", oResp)
IF (nSuccess == 0)
    ? oHttp:LastErrorText
    oHttp:destroy()
    oJsonOAuthCC:destroy()
    oJson:destroy()
    oResp:destroy()
    RETURN
ENDIF

//  A successful response is indicated by a 202 response status code and an empty response body.
? "Response Status Code: " + Str(oResp:StatusCode)
? "Response Body:"
? oResp:BodyStr

IF (oResp:StatusCode >= 400)
    ? "Response Header:"
    ? oResp:Header
    ? "Failed."
ENDIF

oHttp:destroy()
oJsonOAuthCC:destroy()
oJson:destroy()
oResp:destroy()